Web Wiz Support and Community Forums : External readingof PM’s? https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Wed, 08 Apr 2026 07:03:51 +0000 Wed, 28 Apr 2004 05:23:01 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=10170 <![CDATA[Web Wiz Support and Community Forums]]> https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ <![CDATA[External readingof PM’s? : There are a few knwon security...]]> https://forums.webwiz.net/external-readingof-pms_topic10170_post55445.html#55445 Author: WebWiz-Bruce
Subject: 10170
Posted: 28 April 2004 at 5:23am

There are a few knwon security holes with 7.01 which have been addressed and fixed in the latest version.

Upgrading to the latest version should prevent the problems you mention.
]]> Wed, 28 Apr 2004 05:23:01 +0000 https://forums.webwiz.net/external-readingof-pms_topic10170_post55445.html#55445 <![CDATA[External readingof PM’s? : Thanx for the responses. I wont...]]> https://forums.webwiz.net/external-readingof-pms_topic10170_post55442.html#55442 Author: SilverFaery
Subject: 10170
Posted: 28 April 2004 at 3:56am

Thanx for the responses. I wont re-open the forum until the newest version is configured and ready on my server.

I have been running vers. 7.01 and Im sure that it's that version that is unsafe, if it's not just a threat from a idiot.

Thanx again!

]]> Wed, 28 Apr 2004 03:56:59 +0000 https://forums.webwiz.net/external-readingof-pms_topic10170_post55442.html#55442 <![CDATA[External readingof PM’s? : I tighned up security on the...]]> https://forums.webwiz.net/external-readingof-pms_topic10170_post55441.html#55441 Author: WebWiz-Bruce
Subject: 10170
Posted: 28 April 2004 at 3:16am

I tighned up security on the PM part a couple of versions back as I did find a small security problem.

This was fixed, so make sure you are running the latest version.

But nothing that allowed an external source to view PM's.


Edited by -boRg-]]> Wed, 28 Apr 2004 03:16:10 +0000 https://forums.webwiz.net/external-readingof-pms_topic10170_post55441.html#55441 <![CDATA[External readingof PM’s? : SilverFaery wrote:I was told...]]> https://forums.webwiz.net/external-readingof-pms_topic10170_post55382.html#55382 Author: thekiwi
Subject: 10170
Posted: 27 April 2004 at 5:06pm

Originally posted by SilverFaery SilverFaery wrote:

I was told this by a guy in a discussion aboutprivacy of PM's. He claimed that he could get the PM's from the SQlfrom a single string.

It sounds too unbelievable but he refered to the code.
I know it's possible in access, but SQL?


WWF is pretty well proteced from injection attacks.  Ive alsotried calling someone elses PM ID when logged in as another user .. andthat didn't work either.

Be interested to see this demonstrated rather than just talked about :-)
]]> Tue, 27 Apr 2004 17:06:07 +0000 https://forums.webwiz.net/external-readingof-pms_topic10170_post55382.html#55382 <![CDATA[External readingof PM’s? : I was told this by a guy in a...]]> https://forums.webwiz.net/external-readingof-pms_topic10170_post55377.html#55377 Author: SilverFaery
Subject: 10170
Posted: 27 April 2004 at 4:48pm

I was told this by a guy in a discussion about privacy of PM's. He claimed that he could get the PM's from the SQl from a single string.

It sounds too unbelievable but he refered to the code.
I know it's possible in access, but SQL?

]]> Tue, 27 Apr 2004 16:48:12 +0000 https://forums.webwiz.net/external-readingof-pms_topic10170_post55377.html#55377 <![CDATA[External readingof PM’s? : you&#039;ll need bruce to verify...]]> https://forums.webwiz.net/external-readingof-pms_topic10170_post55376.html#55376 Author: dj air
Subject: 10170
Posted: 27 April 2004 at 4:36pm

you'll need bruce to verify this but i would think it is not accessable.. as you need to login to the SQL server, also return the certain values. and the security measures in this script are top notch...

 every hacking access is protected to the forums best abilaties...

where did you hear this, are you sure they didn't mean you can have an external pm service on the website outside the forum but on the same website.

]]> Tue, 27 Apr 2004 16:36:13 +0000 https://forums.webwiz.net/external-readingof-pms_topic10170_post55376.html#55376 <![CDATA[External readingof PM’s? : I&#039;ve just been told that...]]> https://forums.webwiz.net/external-readingof-pms_topic10170_post55349.html#55349 Author: SilverFaery
Subject: 10170
Posted: 27 April 2004 at 12:15pm

I've just been told that it is possible to access the PM system from an external source?

I use SQL and stopped using Access after a hacking incident, so I didn't believe this to be possible in a secure SQL enviroment.

It would really undermine my trust in this forum script and I don't want that. Plz let me know if it's true...

]]> Tue, 27 Apr 2004 12:15:53 +0000 https://forums.webwiz.net/external-readingof-pms_topic10170_post55349.html#55349